$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: lb/qJu4Yqdk+BP3EbLNLr6xEhWZQXTGHhjsX0K/70gI= Subject key identifier: DB:70:55:84:5C:7C:C0:1D:63:B7:48:CC:47:15:80:7B:95:BD:24:16 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 09489CFB9625918466C64DCD3FB389FEA4D7653E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0320 Signing time: Sat 23 Aug 2025 02:30:51 +0000 Manifest this update: Sat 23 Aug 2025 02:25:51 +0000 Manifest next update: Tue 26 Aug 2025 10:47:51 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 2: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: bWiIdWMxNWs8rQxFaX3NX5hlAgN2VlHFIr0F2/no1J8=) 3: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) 4: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:48:9c:fb:96:25:91:84:66:c6:4d:cd:3f:b3:89:fe:a4:d7:65:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Aug 23 02:25:51 2025 GMT Not After : Aug 26 10:47:51 2025 GMT Subject: CN=DB7055845C7CC01D63B748CC4715807B95BD2416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:46:69:45:69:f3:c7:c3:ec:43:1b:b0:e0: db:c0:9a:12:d7:f2:6b:25:61:04:98:ac:44:88:84: 23:8f:0a:1b:1d:87:0b:b0:ce:96:8d:8e:c2:d3:b2: 44:78:c6:b2:62:6c:fa:33:61:17:5e:22:9e:1c:6e: 93:62:94:ab:da:0b:2f:66:cd:bb:cc:e9:6b:6a:fd: b0:70:9e:85:ab:94:00:38:59:47:1c:a6:2c:3f:83: ba:d5:5b:49:42:00:43:7d:c8:eb:e4:a8:61:8e:83: be:d9:61:5c:dd:95:3f:d1:1f:a0:fd:68:d0:12:96: 24:e0:dc:8d:36:58:a9:41:9b:b6:ac:5f:cb:c9:4d: 7c:81:59:26:64:46:64:a4:9c:7a:68:b9:6a:83:de: 98:71:5d:a2:84:90:af:3b:4b:17:28:48:7c:9c:97: 15:5b:01:79:63:b1:9c:8b:07:e7:b1:2b:b5:97:73: 03:be:81:9e:e4:4c:3b:b7:93:41:ed:c3:9f:f9:3e: 95:da:51:e6:06:5b:5c:5b:dc:05:81:e4:92:54:92: 7c:1b:07:92:11:3f:9b:cc:19:bd:27:62:08:b0:ab: 34:59:e7:98:06:2e:69:7d:1f:ba:0c:ca:cf:e2:93: 06:a6:0e:75:b1:0a:37:61:85:e5:36:b6:85:95:c1: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:70:55:84:5C:7C:C0:1D:63:B7:48:CC:47:15:80:7B:95:BD:24:16 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7e:25:6d:b0:e1:4f:57:34:08:90:1c:ea:50:eb:f9:a8:7f: 25:98:f7:3c:9a:e7:b0:3d:71:b7:b0:0b:19:94:21:a2:9a:73: 60:d3:a4:71:75:69:e6:50:6e:9d:fa:0e:dd:9a:08:2d:fe:9b: 1c:8f:8e:a7:73:e1:51:a8:45:ad:8c:13:19:64:b3:87:3d:28: d9:e8:a0:ab:fc:e0:69:88:7c:27:2e:37:96:d3:c0:d5:6b:09: 4b:ce:8f:9e:4b:ba:d0:5c:3e:de:57:40:a2:e8:28:c7:3e:53: 20:65:96:fa:3f:89:fd:c4:85:fd:7f:c4:cd:ff:65:d9:4a:31: 80:59:00:b3:3b:9b:fc:b9:16:c3:2d:d0:9d:51:df:6e:37:26: 6e:5c:3e:e2:43:8c:1b:18:cc:7f:ef:07:3c:8e:ca:91:d5:25: 80:14:97:3a:b0:57:63:d3:f2:1a:b8:69:7e:ed:2f:e0:c2:b5: 2a:34:bb:dc:f3:e3:80:6a:a7:ae:d4:89:d6:6a:d0:ee:5a:9c: a2:73:e2:a8:ca:ba:81:ad:61:ed:06:7c:f4:d7:39:32:95:cf: 8a:b1:8b:08:b4:3d:01:4b:7a:90:ca:87:36:6c:28:70:29:a0: 2f:ba:9a:ab:79:ee:92:37:74:45:d3:cf:db:da:82:4f:48:39: 72:b8:47:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUic+5YlkYRmxk3NP7OJ/qTXZT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTA4MjMwMjI1NTFaFw0yNTA4MjYxMDQ3NTFaMDMxMTAvBgNV BAMTKERCNzA1NTg0NUM3Q0MwMUQ2M0I3NDhDQzQ3MTU4MDdCOTVCRDI0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pEZpRWnzx8PsQxuw4NvAmhLX 8mslYQSYrESIhCOPChsdhwuwzpaNjsLTskR4xrJibPozYRdeIp4cbpNilKvaCy9m zbvM6Wtq/bBwnoWrlAA4WUccpiw/g7rVW0lCAEN9yOvkqGGOg77ZYVzdlT/RH6D9 aNASliTg3I02WKlBm7asX8vJTXyBWSZkRmSknHpouWqD3phxXaKEkK87SxcoSHyc lxVbAXljsZyLB+exK7WXcwO+gZ7kTDu3k0Htw5/5PpXaUeYGW1xb3AWB5JJUknwb B5IRP5vMGb0nYgiwqzRZ55gGLml9H7oMys/ikwamDnWxCjdhheU2toWVwRiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23BVhFx8wB1jt0jMRxWAe5W9JBYwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJ+JW2w4U9XNAiQHOpQ6/mofyWY9zya57A9 cbewCxmUIaKac2DTpHF1aeZQbp36Dt2aCC3+mxyPjqdz4VGoRa2MExlks4c9KNno oKv84GmIfCcuN5bTwNVrCUvOj55LutBcPt5XQKLoKMc+UyBllvo/if3Ehf1/xM3/ ZdlKMYBZALM7m/y5FsMt0J1R3243Jm5cPuJDjBsYzH/vBzyOypHVJYAUlzqwV2PT 8hq4aX7tL+DCtSo0u9zz44Bqp67UidZq0O5anKJz4qjKuoGtYe0GfPTXOTKVz4qx iwi0PQFLepDKhzZsKHApoC+6mqt57pI3dEXTz9vagk9IOXK4RwA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:48 2025 by rpki-client